$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a68150d5-4385-3ac6-a10e-362c2d66a738.roa File: a68150d5-4385-3ac6-a10e-362c2d66a738.roa (raw, json) Hash identifier: y8QBQdb1w3WFmcQtrii+9d3wvwlrri7JS3lVi3UA0yg= Subject key identifier: B1:92:91:D4:C9:B9:93:D2:8D:B8:AA:80:14:1A:BB:64:3F:D9:DC:21 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F43285849F715123E8194D357A6655500 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a68150d5-4385-3ac6-a10e-362c2d66a738.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 20473 IP address blocks: 8.9.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:12:3e:81:94:d3:57:a6:65:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=2103088e-b9d1-4d89-ae1c-32e5065855d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a5:fc:c2:d5:bc:d1:48:7c:8c:ae:f9:97:a4: 4a:bd:58:75:38:0c:41:ca:83:7c:bb:f1:91:c7:77: 96:9e:2a:a1:7e:98:e4:0e:9d:e0:79:b1:95:be:31: 7f:f9:f3:8f:cb:46:4d:39:91:70:7a:cf:bc:e9:b1: e5:24:fe:21:da:7c:64:f1:95:b6:5e:cf:82:7d:db: 13:fc:2d:ff:10:a6:c5:c6:20:fa:8f:41:7c:07:b4: b9:e6:14:5d:80:63:d0:04:31:ae:e5:c9:71:46:ee: 8e:bf:05:f5:7b:43:77:99:a9:cc:3a:e4:59:f9:21: 7b:d6:81:0c:bb:6e:87:69:ad:4d:91:ad:c8:34:94: 94:03:ea:77:31:5d:9f:7c:21:27:fe:66:e1:8c:c1: c9:b0:56:c3:05:7f:cb:1d:03:3a:7b:23:05:7d:8e: 85:17:75:02:16:f9:13:10:85:41:bd:c1:b8:02:14: 00:f4:a0:74:4c:2a:3b:26:09:f0:31:18:61:52:79: d4:dc:d5:ad:da:9c:40:c5:6a:c6:7b:ad:3c:9d:30: 43:80:9e:c5:2a:b6:d6:7f:6f:2f:a4:7b:19:0b:d4: b6:ac:94:d8:0f:45:91:9e:89:dc:e6:6f:ba:47:a2: b0:fa:09:88:d0:7a:73:da:93:f6:ca:11:c4:70:ac: b3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:92:91:D4:C9:B9:93:D2:8D:B8:AA:80:14:1A:BB:64:3F:D9:DC:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a68150d5-4385-3ac6-a10e-362c2d66a738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ee:1d:28:c9:e2:74:68:76:1e:c1:47:a4:c0:f2:5b:f4:0a: 09:d1:44:46:e2:97:65:60:0a:5b:86:60:6d:d2:67:d8:17:3a: a0:77:52:f1:46:e7:c5:66:81:ea:6e:83:39:34:d1:e8:6e:30: f9:15:29:ae:9c:ad:96:9f:3c:95:5d:8c:af:3f:03:a4:7f:40: 2d:99:b3:37:ec:f1:cb:fe:55:81:11:9b:2b:4e:97:58:e8:a6: 0d:a7:31:07:7f:98:c4:a7:5b:70:1d:41:2f:4c:e9:72:2e:79: d9:fa:15:66:b4:eb:ac:ab:c6:61:6d:22:20:97:57:49:4f:97: 3a:68:3b:68:4b:21:33:72:f6:b3:24:25:59:85:bd:da:60:e1: ce:e7:1e:03:54:52:30:4e:6b:9a:d5:72:88:99:b9:b0:98:30: 2b:ab:f4:ff:3f:6c:b2:06:02:c2:9d:a3:94:c6:d5:dd:fb:cb: c6:b6:83:e3:0a:67:2a:58:8b:2f:85:97:3e:43:00:4b:a4:80: c5:26:b7:a3:ea:d5:02:3e:88:bb:7d:b8:0e:01:33:61:f6:85: 18:8e:85:14:3c:b2:6e:9b:b0:f9:6e:ff:28:84:b8:1e:d3:e9: f1:7f:e3:b0:fe:de:eb:42:9e:21:b0:2e:2f:df:1b:55:90:2a: c6:8e:08:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRI+gZTTV6ZlVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk MjEwMzA4OGUtYjlkMS00ZDg5LWFlMWMtMzJlNTA2NTg1NWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6X8wtW80Uh8jK75l6RKvVh1OAxByoN8u/GR x3eWniqhfpjkDp3gebGVvjF/+fOPy0ZNOZFwes+86bHlJP4h2nxk8ZW2Xs+CfdsT /C3/EKbFxiD6j0F8B7S55hRdgGPQBDGu5clxRu6OvwX1e0N3manMOuRZ+SF71oEM u26Haa1Nka3INJSUA+p3MV2ffCEn/mbhjMHJsFbDBX/LHQM6eyMFfY6FF3UCFvkT EIVBvcG4AhQA9KB0TCo7JgnwMRhhUnnU3NWt2pxAxWrGe608nTBDgJ7FKrbWf28v pHsZC9S2rJTYD0WRnonc5m+6R6Kw+gmI0Hpz2pP2yhHEcKyzXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGSkdTJuZPSjbiqgBQau2Q/2dwhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYTY4MTUwZDUtNDM4NS0z YWM2LWExMGUtMzYyYzJkNjZhNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbuHSjJ4nRodh7BR6TA8lv0CgnRREbil2VgCluGYG3SZ9gXOqB3UvFG 58Vmgepugzk00ehuMPkVKa6crZafPJVdjK8/A6R/QC2Zszfs8cv+VYERmytOl1jo pg2nMQd/mMSnW3AdQS9M6XIuedn6FWa066yrxmFtIiCXV0lPlzpoO2hLITNy9rMk JVmFvdpg4c7nHgNUUjBOa5rVcoiZubCYMCur9P8/bLIGAsKdo5TG1d37y8a2g+MK ZypYiy+Flz5DAEukgMUmt6Pq1QI+iLt9uA4BM2H2hRiOhRQ8sm6bsPlu/yiEuB7T 6fF/47D+3utCniGwLi/fG1WQKsaOCJA= -----END CERTIFICATE-----Generated at Sun Jun 15 17:30:28 2025 by rpki-client